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Now J, signing in and purchasing online 
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Increase revenue and build 
stronger custonner relationships with 
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Finally, one sign-in name, password, and 
wallet for easy sign in and secure 
purchasing at a fast-growing number of 
Web sites. 



Start using Passport today at these great sites. 
Check back frequently for updates! 



Find out more about Passports 

Check out Member Services to view or 
update your Passport profile and learn 

more about Passport. 
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What is Passport? 

Microsoft Passport consists of two services: a '' singie sion-in" service ttiat allows you to S/*^g 
use a single name and password at a growing number of participating Web sites, and a S<ff^ 1 
''wallet'' service that you can use to make fast online purchases, S'ew^ce. 



It's easy. There's only one name and password to remennber, and after you sign in to 
one participating site, you can sign in to others with just one click. 

It's fast. You can s tore information about yourself in your Passport sign-in profile and 
wallet, so you won't have to retype it when you visit or make online purchases at 
participating sites. 



It's secure. Your personal information is protected by p owerful encryption technology secOnK^ 

and strict privacy policies, and you're always in control over which sites have access to ^ 

it— including your e-mail and mailing addresses. And, when you sign out, all of your ^-'crv 

Passport-related personal information is deleted from the computer, which means it's -fc^cyypion 

safe to use on public or shared computers. ^ 

To get started, get a Passport now! 

See also 

• What is the single siqn-in sefvice? 

• What is the wallet service? 

• DirectofY-M 

• How secure is Passport? 
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What is the single sign-in service? 

Passport's single sign-in service is a single name and password that you can use to 
sign in to any participating Passport site. Also, after you sign in to any participating 
site, you can sign in to any other participating site with just one click, and without 
having to retype information. 




S-^iass^s^ift Horn*:'; 


Kids $^^S!$fs35Sscirt 








Help 


Passport 













When you create a Passport, the information you provide is stored in your Passport 
"sign-in profile." (NOTE: The credit card and address information you store in your 
wallet is not included in your sign-in profile.) The information in your sign-in profile is 
information that you regularly provide when you register with a Web site to take 
advantage of special features or options. When you sign in to a participating site, your 
sign-in profile is sent to the site, saving you from having to retype it. -xo 



See also 




• What's stored in your sign-in profile? 

• How.securels.P.a 

• Sig nin g in 



Go to Help contents 



Some elements © 1999 - 2000 Microsoft Corporation. All rights reserved. 
Passport Links: Member Services Terms of Use Privacy Policy 



http://web.archive.org/web/20000621100658/memberservices.passportxom/HELP/MSRV_H 



5/18/04 




Implementation Overview 



This document is intended to give you an overview of what steps you should take to implement either or both of the two 
Passport services on your site. The complete implementation steps are contained in the downloadable WajkiMniplrail^^^^^^^ 
J?3.iJLid<l. and the £3ss.p„ort SJn.gifi S^^^ Note that you'll be required to quiclcly rfljiister.you^^^ 

company free of charge before you can download the documentation. 



Implementing Passport on your site is easy, but the amount of time it takes depends on which services you choose to 
implement and the degree to which you want to incorporate these services into your site. You can choose the extent to 
which your site's navigation, flow, and user experience is redesigned to maximize the use of the Passport services. Finally, 
the degree to which you customize, or "co-brand," Passport screens to match your site is at your discretion. 



After you register your Passport site and download the documentation, you'll have access to extensive information and 
assistance to help you troubleshoot the implementation process. 



Commitment to Privacy 

Passport is committed to safeguarding the security and privacy of its members' information. Ail sensitive information is 
encrypted, and all participating Passport sites are required to adhere to strict privacy policies and local privacy laws. 



For example, all participating sites must have a posted privacy statement, and alt sites are strongly encouraged to be 
registered with an independent, industry-recognized, privacy-assurance body like JftUSTe or BBBO^^^ online division 

of the Better Business Bureau). By using Passport, visitors to your site will enjoy a more convenient online experience, and 
they'll find it reassuring to know that they are always in control of the information stored in their Passport sign-in profiles, 
which sites receive it, and how it is used. 



Overview of Steps 

This section provides an overview of the steps required to implement the Passport wallet and single sign-in services on your 
site. More detailed information, and access to many of the items shown in these steps, can be found in the In Forma ttofi for 
D.5ty «Jo Ei.^.C5i s e ct io n . 



Wallet 

To implement the wallet service: 



1. PJ<*f;« 3 hf Ph^^poti Express Pup*ch;j^s^i b«Uc>rt, Pasupoft W;*i3«t b«t.tofi, or v^ajatst text tjnk the 

put'cU^i^ta ymcjif?.^ of your VVeJ> mtt?.. 



[3 



Express purchase using Passport 
Passport wallet 

These links point to the Passport wallet Web server, where the customer selects which information (such as credit 
card number and shipping address) to return to you. Then, you retrieve the wallet information from HTML form 
fields, POSTed as a form over an SSL connection. 



2. Uise ASP/CGX to reln^sve the inform^*tk>n POST^tl to your sft« frofn th« w;#U«t server. The form field names 
in the POST are compliant with the Electronic Commerce Modeling Language (ECML) standard. A majority of 
merchant Web sites are already using ASP or CGI programs to process POSTed payment information, so parsing 
Passport wallet information is probably very similar to what you are already doing. 



Passport wallet is the most flexible wallet service available today, and it also allows you to; 



o Co-brand the Microsoft Passport screens with your own text and graphics. 

o Customize the pages to include information such as your credit card preferences. 



http://web.archive.org/web/20000620192755/wvm.passport.com/Business/Implement^^^ 
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o specify particular fonts and background colors using cascading style sheets. 

When you are ready to go live, you will be required to sign a contract, accept the service fee structure and agree to abide by 
the Passport policies, which protect Passport nriembers from any misuse of their personal information. More details can be 
found within the 3oinjJi;-i £a^^^^ of this Web site. 

Single sign in and Kids Passport 

To implement the single sign-in service: 

1. Make sure you have a running Web s-srver. The Web server must meet the following minimum system 
requirements: 

Hardware requirements 

O x86 computer with a Pentium processor 
O 64 MB RAM 
O CD-ROM drive 

Software requirements 

O Windows 2000 and IIS 5.0, or 

O Windows NT 4.0 with Service Pack 3.0 or later, with IIS 4.0 and IE 4.0 or later 



Note: Passport is currently being ported to most popular Unix platforms. If your site is hosted on Untx and 
you are interested in using Passport single sign in, please contact .Pj^f9.@.^•icl^cs.^^^^ inquire about availability 

for your OS/Web server platform. Important: This applies only to the Passport single sign-in service; because the 
Passport wallet service does not require any Microsoft code to be installed on your servers, it can be deployed 
immediately regardless of the OS/Web server platform you use. 

Operations requirements 

O SSL Certificates (Required to support the Passport wallet service; SSL support is not strictly required for the 

single sign-in service, but is necessary for proper co-branding support in certain scenarios) 
O 128-bit SSL certificates (recommended, but not required) 

IniStaJ! Passfptirt Manag^ar. The Passport Manager server side object contains the server-side decryption code , and 
the cookie and profile access mechanisms , needed to easily integrate the single sign-in service into your site. The 
i^assjecrFsEni^^^ Manager software and administration tools and alt the 

documentation you need to help you implement Passport on your Web site, Afote; The Passport Manager and SDK is 
required only for sites Implementing the single sign-in service. 

DeveSop tttst Pff*si!ifK>rt on yogis' Wttb aiiin. You'll need to add server-side script and standard UI elements to 
your Web site. To get started, review the Pai:.«ii.ip.rLS5L^^^^ Also, depending on which parts of 

the service you choose to participate in, you'll need to display the Passport logo as well as the Sign In and Sign Out 
links in the appropriate areas of your Web site. See the Passppxt.Comrnu,^^^^^ more information. 

You must adhere to Passport guidelines included in the SDK as you are developing your Web site, including the 
guidelines related to the following areas: 

Collecting member information 

Passport makes it easy for you to collect information from visiting Passport members. When a member clicks the 
Sign In link on your Web site, you'll receive the member's sign-in profile. 

Passport rf%^ 




You must not rely on the assumption that all of the member's information is present in their Passport sign-in profile. 
For example, if you require a member's date of birth for personalization, and the member has not supplied this 
information in their sign-in profile, then you are responsible for collecting this information on your own. You should 
also provide the member with the option of adding the new information to their sign-in profile. 



Deleting cookies 

For security reasons, you must delete all Passport-related persistent and session cookies from a member's computer 
when the member signs out by clicking the sign-out link or by closing the browser. 

Passport «s? 
s\ano(A <sSL 

This policy ensures that unauthorized people are not able to access member information from the same computer. 
The appropriate sign-out code is illustrated in the example site contained in the SDK. 

transitioning existing members 
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If your Web site already uses a pre-existing membership system, you will want to provide your current members 
with a smooth transition to Passport. This might include linking their existing membership information to their 
Passport. The best way to do this for your members will vary, and it is absolutely your decision. 

4. Rogistflr your Wob ^ila. with Passport. Passport will not function properly on your site until you are a 
participating Passport Web site. When you are ready to go live, please refer to the Join tha Passport Network section 
of this Web site for details. 

5. Cc?nfjtjur*3 and fnaintatn ycor Web ^tie. Once your Web site is registered with Passport, you can use the Passport 
Administration Utility to modify the registry settings. Passport also provides information on monitoring your Web site 
as well as troubleshooting tools such as Passport-specific NT events, performance monitor, and error codes. 

Passport does not restrict you to a single Passport-integrated site. You can have multiple sites, each of which is configured to 
use Passport. Your various single sign-in sites that are in one domain will be able to share the sign-in profile information 
they receive from Passport, Therefore, i tjs possible to maintain mem ber information among your different sites and deposit 
t his information in one database common to an ot your sites. ^ 

Final Note 

The Passport service was designed to be simple for you to understand and implement, but if you still have questions about 
implementing Passport on your site after reviewing the Passport Develoflgj' Inrofination. developer support is available 

through Microsoft Technical Support. For developer support program information, please visit MJcros^ft Oe^^^ 

© 1999-2000 Microsoft Corporation. All rights reserved. 
TRijSTe Approved Privar.v State ment | Terms of Use 
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Single Sign-in (SSI) Seirvice Overview 

Microsoft Passport provides an easier online experience. 

The Microsoft® Passport single sign-in service allows people who visit your site to use the same sign-in nanrte and password 
they use at all participating Passport SSI sites. These visitors will be able to save time and avoid repetitive data entry by 
creating a single sign-in profile of basic demographic Information that they can share with participating Passport sites. 
Additionally, because a member's Passport sign-in name is tied to the individual, and not to the computer, a member can 
roam and access your site from any device, anywhere, anytime. Mapping the Passport ID provided in the profile to 
information in your databases enables you to offer members a personal Web experience through targeted ads, promotions, 
and content, which in turn helps to increase loyalty, sales, and advertising revenues. 

To see the Passport single sign-in service in action, try our quick dftmo . 

Offer your visitors a personal Web experience 

Customization and profiling technologies are in high demand by businesses on the Web today. The Passport single sign-in 
service is designed to allow you to create a personal, directed online experience for every visitor to your Web site. The more 
personalized and local the experience, the more likely the visitor will choose to make a purchase at your site. Increase your 
sales and retain more customers by offering the Passport single sign-in service, which is available worldwide in 14 
languages. 

Increase acquisition and retention of young visitors 

Kids Passport, an optional feature of the SSI service, helps parents protect their children's privacy online by allowing them to 
determine whether their child can use participating online services that collect personally identifiable information. Kids 
Passport is the first turnkey solution available to Web sites for managing parental consent and helping sites comply with the 
Children's Online Privacy Protection Act (COPPA). COPPA, which goes into effect April 21, 2000, requires that Web sites 
obtain parental consent before collecting and/or disclosing a child's personal information. 

You'll find plenty of flexibility while implementing the service, so you can ensure the consent process does not stand in the 
way of your ability to acquire and retain customers. Using Kids Passport features in the single sign-in service, you will be 
able to apply the policy that best matches the way children use your site. For example, if some of your site's services should 
not be accessible to children, you can detect that which Passport members are underage and block them from these 
services. The centralized parental-consent service allows parents to verify their identity only once (rather than at each site), 
provide their consent for multiple sites all at one time, and conveniently modify their consent decisions on a site-by-site 
basis. You can choose to use other parental-consent services with SSI, but Kids Passport was specifically designed to 
integrate fully with SSI, making it easy to implement and use. 

Easy to implement 

Passport has been designed to make it as easy as possible for you to incorporate into your Web-site operations. Passport 
uses standard Web technologies and techniques, such as Secure Sockets Layer (SSL), HTTP redirects, cookies, JavaScript, 
and strong symmetric key encryption (Triple DES) to deliver the single sign-in service. No software download is required for 
members, and the Passport services are compatible with all common browsers. 

To use the Passport single sign-in service, install a simple library that looks for and is capable of decrypting Passport cookies 
containing sign-in and profile information. The Microsoft Windows 2000/NT4 version is implemented as a dual-interfaced 
COM object. (Note: Versions for most popular Unix platforms will be available late this spring. Check the P.aJi£p.orLWj?.^^^^^ 
periodically for updates.) You can use the simple APIs exposed by this Passport Manager library to secure your site using the 
Passport single sign-in service and to apply the profile information of visiting members. 

How does it work? 

Passport single sign-in offers an experience that is very much like the forms-based authentication that is common on the 
Web today. The Passport network simply extends this notion to work across a distributed set of participating sites, while 
preserving the member's privacy and security, and your ability to appropriately customize and brand the sign-in experience. 

Forms-based authentication typically works on a single site as follows; 

1. A visitor tries to access a secure page on a site. 

2. The page runs code that looks for an authentication cookie. If it isn't there, the site redirects the visitor to a sign-in 
page and asks for a sign-in name and password. (If this is the visitor's first visit to the site, he or she might also 
visit an additional series of registration pages to collect personal information and to choose a unique sign-in name.) 

3. The site validates the sign-in name and password against a local database. 

4. If the visitor's sign-in name and password are validated, the site writes an authentication cookie, which asserts that 
the visitor is authenticated. 

5. The site redirects the visitor back to the original page he or she was trying to access. 

6. As the visitor moves from page to page, code running on each page verifies the authentication cookie without 
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interrupting the visitor. 

7. Depending on the security preferences of the site, the authentication cookie nnight expire at some point, requiring 
the visitor to retype the sign-in name and password. 

8. When the visitor closes the browser or explicitly clicks a sign-out link, the authentication cookie is deleted so that 
the next person visiting that Web site from the same computer cannot be mistaken for the original visitor. 

Variations on this modet, particularly on the exact format and rules governing the authentication cookie, exist across the 
Web today depending on the security preferences of the site. Passport extends this modet in the following ways: 

The sign-in, sign-out, and registration pages are centrally hosted (over SSL) rather than being specific to each 
individual site. 

The visitor's experience with Passport can be extensively co-branded to match the look and feel of your site. 
All Passport sign-in and core profile cookies are strongly encrypted using Triple DES. Each participating Web site 
receives a unique encryption key that ensures information privacy. 

The central Passport servers return encrypted sign-in and profile information to your site as parameters on the HTTP 

Query String, which your site can use to write local cookies and avoid redirects on subsequent page views. 

After members have signed in to a site in a given Internet session, they don't need to retype their sign-in name and 
password when moving from site to site. The redirects still occur, but a set of encrypted cookies is issued in the 
Passport central servers' domain to facilitate this silent and seamless sign in across sites. (This set of cookies 
includes an SSL-encrypted cookie that contains a member's sign-in name and password, if the member chooses the 

"Sign me in automatically on this computer" option when signing in.) 

Participating Web sites never receive a member's actual password. The authentication cookie is actually a pair of 
encrypted time stamps asserting when the member signed in. 

When members choose to sign out by clicking the Sign Out link, they are redirected to a central page that deletes all 
Passport cookies from all of the sites they visited during the session. This is accomplished via HTML image tags and 
HTTP redirects. 

There is no real-time server-to-server communication between participating Web sites and the central Passport 
servers. All information exchange occurs through the client's browser using HTTP redirects and cookies. The only 
server-to-server communication done by the Passport Manager running on a participating site's servers is to 
periodically download a centrally hosted configuration file. This XML document contains current URLs for all the 

Passport servers and the current profile schema. 
Consumer information policy 

The Passport service is committed to safeguarding the security and privscy of member information. In addition, you should 
feel secure knowing that Microsoft will protect its relationships with businesses that participate in Passport services. The 
following details what Microsoft will and won't do with the single sign-in and profile service: 

What the Passport single sign-in service will do: 



• Collect and store individual members' sign-in profile information (sign-in name, password, region, zip code, and 
other optional information filled in at members' discretion), and share that information with participating Passport 

Web sites only when Passport members sign in to those sites. 

• Adhere to Passport's comprehensive privacy policy as updated and published on this site. 

What Passport single sign-in service won't do: 



• Share or sell information on an individual basis to third parties. 
To get started 

Read the information contained in the imp[e]Ts_enta,^^^^ see the JoJn the^Psss^^ section of this Web 

site. 

For Consumnicrft | For SHSinegs | For fire'?53 | Tntemational 
© 1999-2000 Microsoft Corporation. All rights reserved. 
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Increase Sales and Build Stronger Customer Relationships with PassportI 

Microsoft® Passport is a new suite of e-commerce services that makes using tlie Web and purchasing online easier, faster, 
and more secure for your customers. Passport helps your customers reduce the number of steps necessary to access your 
site and make purchases by allowing them to create a single sign-in name, password and "wallet" to use at any participating 
Passport Web site. 

Microsoft Passport consists of two distinct services: 



o The Passport smt^ie sipn-m servdce (SSI) allows members to use a single sign-in name and password at any 
participating Passport site and from any computer connected to the Internet. Additionally, members can choose to 
place commonly requested personal information in their Passport sign-in profile and share it automatically with sites 

where they choose to sign in to, saving them from having to retype it. 

^ Xh.^..PA?.?J?PXL>^i?JJj?Jl-?j.^^ members to enter their credit card and address information once, and then 

provide that information to merchants at the time of purchase with the convenience and security of just a few clicks. 



You can choose to use the single sign-in service, the wallet service, or both on your site. 



° Kids Passport. The Passport suite of services also includes Kids Passport, a parental-consent service that is an 
optional feature of the SSI service. Kids Passport helps parents safeguard their children's privacy online by allowing 
them to determine whether their child may use participating online services that collect personally identifiable 
information. Kids Passport is the first turnkey solution available to you for managing parental consent and helping 
you comply with the Children's Online Privacy Protection Act (COPPA), which goes into effect April 21, 2000. COPPA 

requires that Web sites obtain parental consent before collecting and/or disclosing a child's personal information. 
Benefits 

Passport's single sign-in and wallet services can benefit your Web site in the following ways: 

o Streamlined purchases and registration. Passport will increase your site's sell-through and registration rates by 
delivering an improved customer experience that reduces repetitive sign-in, registration, and purchasing processes. 

o Increased customer acquisition and retention. You will earn the business and loyalty of Passport members, who 
value the ease and security of visiting and purchasing from participating Passport sites. There are more than 60 
million members using the Passport service today. 

o Easy implementation. Both services use standard Web technologies and techniques, making site implementation 
easy. 

o Extensive customization. Passport is designed to be highly customizable, so that as Passport members purchase 
goods and services from your site, they maintain a continuous association with your site, brand, and the purchase at 
hand. 

Implementation details 

Passport is easy to implement. As described in the Impjem^^ adding the Passport wallet to your site is a 

simple, two-step process, requiring only basic Web-development skills. No new software installation is required. The Passport 
single sign-in service utilizes a simple, server-side code library and can be implemented easily by Web developers familiar 
with basic ASP programming. 

Worldwide availability 

The Passport wallet and single sign-in services are both available today worldwide and are currently being deployed by 
XCL^.OXiJ?j?AL\\Q.,yy!£kMi?.^^^ Both services are available in more than 10 languages today, and will soon be available in 25 
languages, including: Arabic, Brazilian, Czech, Danish, Dutch, Finnish, Greek, Hebrew, Hungarian, Icelandic, Italian, Korean, 
Norwegian, Polish, Portuguese, Russian, Simplified Chinese (PRC), Slovak, Slovenian, Spanish, Swedish, Traditional Chinese 
(Taiwan), and Turkish. 

We invite you to review the PASSjPP.rt^yhjtepap.efj XWP\^W.^MAU9Si.JQyMLVA^yt{.^f^<^ .infP.r.CO.aM?.nJ:?r..#.y.i?i^^^^ fof additional 
information. To inquire about becoming a participating Passport Web site, please see JoJ.n Jhj?„P«s5pP.rt.N^^^ Finally, we 
en cou ra g e y ou to ch eck hJJfciJj./Vweb„. ajxhjvft 
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EPJcM::J.033 periodically for updates and additions. We look forward to working with you! 
The Microsoft Passport team 

© 1999-2000 Microsoft Corporation. All rights reserved. 
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Microsoft Passport is committed to Safeguarding 
Security and Privacy 

We recognize that your privacy is very important to you, so we are posting this statement to tell you about how the Passport 
service works, and the steps Microsoft is taking to ensure that your privacy is protected while using Passport at participating 
Web sites. 

Microsoft is a member of TRUSTe, an independent, non-profit initiative that exists to help people feel confident about using 
the Internet for communicating, shopping, researching, and living. TRUSTe aims to build this confidence by promoting the 
principles of disclosure and fair information practices among the Web sites that participate in the program. 



TRUSTe Certification 



This statement discloses the privacy practices for the Passport service and Web site in accordance with the requirements of 
the TRUSTe Privacy Program. When you visit a Web site displaying the TRUSTe trademark, you can expect to be notified of: 

What personally identifiable information of yours is collected. 
What organization is collecting the information. 
How the information is used. 
With whom the information may be shared. 

What choices are available to you regarding the collection, use, and distribution of the 
information. 

What kind of security procedures are in place to protect the loss, misuse, or alteration of 

information under the company's control. 

How you can correct any inaccuracies in the information. 
Questions regarding this privacy statement should be directed to p.assRnyj'&n}!?^^.^^^^ If any TRUSTe certified Web site, 

including this one, has not responded to your inquiry or your inquiry has not been satisfactorily addressed, please contact 
TRUSTe . 




How Passport Works 




Creating a Passport 

^ When you visit a participating Passport Web site, you will have the option to create a Passport. If you choose to create one, 
you will be asked to enter information about yourself, such as your country and postal code. Your email address is required 
to create a Passport, but you can decide whether to share it with Passport sites that you choose to sign in to. 

Microsoft stores the information you choose to provide in a secure database. Microsoft uses this information, called your 
"Passport profile," to streamline your experience at participating Passport Web sites. 



Signing In 

When you visit a Passport site and choose to sign in, your Passport profile is securely sent to that site, 
saving you from having to retype that information time and time again as you move from site to site. 
Microsoft protects your profile by using advanced encryption techniques. 

Note: When you click the sign-in link. Passport sends your profile information to the site, but it does not 
send your wallet information (described below). Passport sends wallet information only after you click 
the Passport Express Purchase or Passport wallet button/link and confirm which credit card and shipping 
address you would like to send to the site. In that case. Passport sends only the credit card information 
and addresses you choose, not all of the information in your wallet. The site may store the profile and 
wallet information sent to it during this process in their database. 



Passport 
Sign-In Link: 



Passport *^ 



Using your Passport wallet 

If you shop at participating Passport sites, you can use the Passport wallet to simplify your online 
shopping experience. Just click the Passport express purchase or Passport wallet button or link on a 
participating site to get started. 

The first time you click this button or link, you will be asked to sign in with your Passport, and then enter 
your credit card, shipping, and billing information. Your wallet accepts alt major credit and charge cards. 



Passport 
Wallet Links: 
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as well as debit cards that do not require a PIN (Personal Identification Number). Microsoft stores the 
information you choose to provide in a secure database, and then sends it using advanced encryption 
techniques to the Passport site you came from so you can complete your purchase. 

From then on^ clicking these buttons or links on any participating Passport site wilt take you to a page 
where you can select from a list of your credit cards and shipping addresses the information you want to 
use for that purchase. A second click sends that information to the site you came from so you can 
complete your purchase. 



Express purchase 
using Passport 



Accessing your Passport Profile 

You can always add to or update the information in your Passport profile or wallet at any time by visiting Passpo.ctJ^.emk^^^^ 
5ervlcj3i;.. You are in charge of what information is shared with other Passport sites. You can click on Edit Profile to enter 
optional information which you may want participating the Web sites to know about you. 



Signing Out 

If you are using a shared or public computer, you should always sign out of Passport when you are 
finished browsing the Web to ensure that others cannot access your Passport profile or wallet. Just click 
the Passport sign-out link on any participating Passport site you have visited. 



Passport 
Sign-Out Link: 

Passport «S? 

Familiarizing Yourself with Site Privacy Policies 

It is important for you to read the privacy statement and terms of use for each site you visit to ensure you are comfortable 
with how they might use your Personal Information. Remember, your Passport information is passed to a participating site 
only when you choose to click the sign-in or express purchase/wallet links on that site. 

Exploring MSN with Your Passport 

Passport also makes it easier for you to navigate through the MSN rtgtvvork . When you sign in to any area of MSN (and don't 
sign out) and you visit any other area of MSN, you will automatically be signed in and you will not have to retype your 
member name and password. Also, your Passport information (excluding wallet information) will automatically be shared 
with each area in MSN that you visit. Please note that when you choose to visit the various areas of MSN (such as MSN...corii^ 
.M^?N.Hoi[T)3j.L .fll^M.ilf)on:2y£:?B.t/.a^^ and so on), you are subject to their specific terms of use and privacy policies. If you don't 
want to be automatically recognized in a particular area of MSN, be sure to click the sign out link before you visit that area. 



Your Passport Public Profile 

Passport allows you to have a Public Profile where you can share information about yourself that can be viewed by the 
public. Creation of a Public Profile is your choice and no public profile about you will exist unless you explicitly choose to 
create one. The in formation collected in the public Profile |ncludes| name. country, state, city, gender, birthday, occupation, 
marital status, and personal statements. When you first create a Public Profile, Passport may choose to make the process 
easier by filling in specific information from your Passport registration profile, but you can change what information is shown 
and can delete anything you do not want shown. The information you include in your Public Profile will be available to 
anyone on the Internet. Passport may reformat your data or transfer it to other services in order to provide requested 
services and/or a better user experience. You should use reasonable judgement about what information you decide to enter 
into your Public Profile. Th^ information vou enter into your profile will be stored on Microsoft Passport se cure servers and 
can only be edited by the passport user after entering the appropriate passport memoer name ana password, you can 
choose whether or not to have a Public Profile and enter or change any information or delete the information in your Public 
Profile at h U" r; : //we h . a r cii i v ft , o f ci /w e b /2 0 C' 0 0 6 2 1 1 6 ?. 1 1 9 /h tt p ; // r> r of i f e ^ . o a :>'> i)o ft . co tri /d ef u It . a s i> ? • c- :l 0 3 . 3 . 



Microsoft Kids Passport 

Microsoft is especially concerned about the safety and protection of children's personal information collected and used online. 
Kids Passport allows parents to consent to the collection, use and sharing of their children's information with Microsoft and 
the sites and services operated by or for Microsoft and with participating Passport Web sites that have agreed to utilize Kids 
Passport as their parental consent process. Please <:lk:k..her.fif to jump further down in this document to view the Microsoft 
Kids Passport Privacy Statement. 

Passport Privacy Principles 



It is very important to Microsoft that you are able to retain your privacy while you take advantage of all the Internet has to 
offer with your Passport. For this reason. Passport will operate by the following principles. 



Principle 1. 




NOTICE OF INFORMATION (INCLUDING PERSONAL INFORMATION) COLLECTED. When you register for Passport, 
you win be asked to provide Information. Some information is required to create a Passport profile (such as email address, 
country, state and zip code), some might be required by that particular participating Passport site (but is not maintained in 
your Passport profile), and some is optional (such as age, gender and language preference). Some of this information is 
Personal Information and some is not. "Personal Information" is defined as information that either personally identifies you 
or allows others to contact you. The only Personal Information Passport requires is an e-mail address. If you choose to use 
the Passport wallet, you will need to provide additional Personal Information, such as name, address and credit card 
information that are necessary to purchase goods and services on-line. 



Principle 2. 
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MEMBER CONTROL^ CHOICE, AND CONSENT, Y ou are in complete control of which Web sites receive the Persona l 
I nformation in your P^ysport profile and Passport wallet . Your Personal Information and accompanying profile information, is 
not given to a Web site unless you explicitly choose to provide it by clicking the Passport sign-in or express purchase/wallet 
link on that site or as referenced above. Microsoft will not share, sell, or use your Personal Information in any way not 
described in this privacy statement without your consent. 




r 

Passport and its participating Web sites use your Personal Information to operate the Passport service. Passport sends out 
welcome e-mail to all new members informing them about the service, its features, and operation. Also, Passport might sen 
periodic informational updates to its members by e-mail. If in the future Passport sends e-mail on behalf of participating 
Web sites, you will be able to follow instructions contained in the e-mail to choose whether or not you'd like to receive 
additional e-mail. 



3 



From time to time. Passport will report average age, gender, and other aggregate membership statistics to our participating 
sites. These reports will not include Personal Information that identifies you or allows others to contact you. 



It is important for you to read the privacy statement and terms of use for each site you visit before you click the Passport 
links to ensure you are comfortable with how they might use your Personal Information. 



Principle 3. 

ACCESS TO YOUR INFORMATION, You can always add to or update the information in your Passport profile or wallet by 

V is it i n g P. a ssp p rt M e m b e.r„S er 



Principle 4. 

SECURE DATA STORAGE AND TRANSFERS. Your Passport information is stored on secure Microsoft servers that are WoXflL 

protected in controlled facilities. When you request to have your Passport information sent to a participating \A^eb site, your ^^Y^a, 

Personal Information is encrypted and securely sent to that Web site using advanced encryption technology. gfiC-UIT^ 




Principle 5. 

USE OF COOKIES, A cookie is a very small text file that a Web site saves to your computer's hard disk to store information 
I that you provide about yourself or to store your preferences. Passport uses cookies whenever you sign in to a participating 
I Passport site. The Passport site stores your member name, the time you signed in, and your profile information in a secure, 
I encrypted cookie on your hard disk. The cookie contains information that you chose to provide to that Web site. You are in 
\ charge of deciding what information sites know about you. 

I When you choose to sign out of Passport, all Passport -related cookies from all Passport Web sites are deleted. 
I However, the site you visited may use persistent cookies that remain on your computer after you sign out of 
I Passport. You can read the site's privacy policy to understand their policies and practices. 

Principle 6. 



PARTICIPATING SITES' COMMITMENT TO PRIVACY, All Web sites participating in the Passport program must have a 
posted privacy statement. In addition, all U.S. -based sites are encouraged to be registered with an independent, industry- 
recognized, priva cy- a ssu ra n ce body like TRy ,51.?. and JBB BjDji Lj n.e . 



Principle 7, 



UPHOLDING OUR LEGAL RESPONSIBILITIES. Microsoft Web sites will disclose Personal Information if required to do so 
by law or in the good-faith belief that such action is necessary to (a) conform to the edicts of the law or comply with legal 
process served on Microsoft or the site; (b) protect and defend the rights or property of Microsoft, this Web site, or 
participating Web sites; and, (c) act under exigent circumstances to protect the personal safety of users of Microsoft, this 
Web site, or the public. 



Principle 8. 

RESPONSIVENESS TO MEMBER CONCERNS. If Microsoft becomes aware of ongoing site-specific consumer concerns or 
problems with Passport participating sites, we will take these issues seriously and work to address the stated concerns with 
that participating site. Questions regarding Passport or this Privacy Statement should be directed to 

p a s f i V 'j.?! iri k ron o:'t . c o rri , 



If at any time you believe that Microsoft Passport Web site has not adhered to these principles, please notify Microsoft 
Passport by e-mail at nasrjE;riv@nicrosofl;.f.om and we will use all commercially reasonable efforts to promptly determine and 
correct the problem. 



Microsoft Kids Passport Privacy Statement 
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Microsoft is especially concerned about the safety and protection of children's personal information collected and used online. 
Microsoft Kids Passport allows parents to consent to the collection, use and sharing of their children's information with 
Microsoft and the sites and services operated by or for Microsoft (including MSN) and with participating Passport Web sites 
that have agreed to utilize Kids Passport as their parental consent process. 

What information is collected from children? 

When you sign-up for a Microsoft Kids Passport, you will be asked to provide the following information for your child: birth 
date; sign-in name; password; password reset question; child's email address; country; state; and, region. Microsoft stores 
this information in a secured database. You will also be given the opportunity to choose email preferences for your child by 
deciding whether you want your child's account to receive informational email on new products and services available on the 
websites they visit. 

Who is collecting the information and how is it being used? 
Microsoft: 

When you create a Kids Passport, Microsoft collects and stores the Information in your child's Passport profile, Microsoft uses 
this information in a number of ways to operate its sites and services (such as to provide the opportunity to do what you 
have requested on the site, to notify you of new products and features related to the site and notify you if you have won a 
contest) and to provide a personalized experience. By creating a Kids Passport you are consenting to Microsoft's collection, , 
use and disclosure of the information in your child's Passport Profile by all Microsoft sites and services in accordance to the 
level of consent that you have given. You are also consenting to allow your child to access the full content available at all of 
the Microsoft's sites and services, unless you specifically deny your child access to a particular Microsoft site or service (when 
available). However, your child wilt still be able to view areas of the site which do not require the collection of personal 
information. Click here to view the current content on http ://wgb .a rr.h ive. ora/wgb/?.000Q6 ?. 1:6? ]. l^/ht^-p ://www. rrii^n .com/ 
and hlt^u/!iWeb„,a.^cMy.^^ 

Microsoft will not require a child to disclose any more information than is reasonably necessary to participate In the activities 
offered by the Microsoft web sites or service. Microsoft does not share the information contained within your child's Passport 
Profile with third parties, except with participating Passport web sites where you have consented to such sharing. 

Participating Passport Sites: 

Kids Passport allows you to limit the amount of information shared with third party sites and services participating in the 
Kids Passport program. You can choose to allow Microsoft to share all information in your child's Passport profile with the 
participating sites, or you can limit the information shared to just a unique identifier and an age range (i.e., that your child is 
under 13). Once you make this decision, your choice applies to all participating Passport sites that you consent your child to 
have access to. 

Kids Passport allows you to choose three types of consent for the collection, use and disclosure of your child's personal 
information by the participating Passport sites and services. First, you can deny access to areas that require personal 
information on any Passport participating web site at any time. Second, except as noted above, you can give "limited 
consent" which means that you consent to the information being used for the operation of the site or service, including 
personalization, but not sharing it with any other third parties, except as necessary to operate the site or service. Third, you 
can give "full consent" which means that you consent to the information being used for the operation of the site, for 
personalization and for sharing the information with other third parties. 

To view the current list of participating Passport web sites, cjjck.he.re. It is important for you to read the Privacy Statement 
and Terms of Use for each website you are consenting for your child to visit and use. 

How the information is being shared vt/ith third parties? 

Kids Passport shares your child's information with participating third party websites in accordance with the consents you 
have given for your child's Kids Passport account. (As stated above, you can choose to allow Microsoft to share all 
information in your child's Passport profile with the participating Passport websites, or you can limit the information shared 
to just the fact that your child is under 13). Your child's information will not be shared unless you have previously consented. 

These participating Passport websites provide a variety of products and services to online users. All of these sites agree to 
have a posted privacy statement describing how they use personal information collected by their website. Click here to view 
the current list of participating Passport websites and to view their privacy statements. As explained above, you may select 
any of three types of consent ("deny", limited" or "full") for the collection, use and disclosure of your child's personal 
information by the participating Passport sites and services. You may edit these consent selections, any time you are online, 
by clicking on Kids Passport, Parents Point. These participating Passport sites will not collect, use or disclose your child's 
information except in accordance with your consent decisions. 

Hovtr is Parental Consent obtained and verified? 

Microsoft Kids Passport obtains and verifies parental consent through the use of a credit card validation process. There is no 
charge to your credit card. This process checks that the credit card number is valid and validates address information. 

What is the security of the data storage and transfers? 
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Your child's Kids Passport information is stored on secured Microsoft servers that are protected in controlled facilities. When 
your child requests to have their Kids Passport infornnation sent to a Passport participating website, the infornnation is 
encrypted and securely sent to that website using advanced encryption technology. 

How to change, update and delete your child's personal Information and email preferences? 

You can, at any time when you are online in Kids Passport, change, edit, update and delete the information in your child's 
Kids Passport account, including your child's email preferences and your consent level for individual websites. To do this, 
visit Kids Passport and click on Parent's Point. In addition, you can also make changes to the list of web sites you have 
previously consented to for your child to visit and use. To do this, visit Kids Passport and click on Parent's Point. 

What happens when my child tries to enter a website where I have not previously given consent? 

Certain Microsoft websites that utilize Kids Passport as well as many participating Passport websites have areas that are 
accessible to all users, including children, as well as areas that require parental consent because they collect, use or disclose 
the personal information of children. If your child tries to access an area of these Microsoft sites or of a participating 
Passport website that does not collect any personal information (and therefore does not require parental consent), the site 
may permit your child to access these areas. If your child tries to access an area that does collect, use or disclose personal 
information, the site may either display a new page that directs your child to an area of the site that does not require 
parental consent or display an error page that tells your child that they need their parents permission to use this area of the 
website. This page will also direct them to the Kids Passport site, where there are instructions on how to obtain parental 
consent. 

Questions and Contacts? 

For questions you may have regarding this Privacy Statement, you can contact Microsoft Kids Passport online by: emailing 
passpriv{§)microsoft.com; by sending postal mail to Microsoft Corporation, KIDS Passport, One Microsoft Way, Redmond, 

Washington 98052; or, by telephoning 425-882-8080. 

© 1999-2000 Microsoft Corporation. All rights reserved. 
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► More Informatton 

Microsoft Passport: Streamlining Commerce 
and Communication on the Web 

REDMOND, Wash., October 11, 1999 — Microsoft today launched 
Passport, a single sign-in and wallet service for communication and 
commerce on the Internet. By-creating-a-single Passport—identityV' 
users«Gan-easily^aeeess"information-and=purGhase~goods-on-multip^ 
Webrsites-using^a^single~login-and=password7 Brad Chase, senior vice 
president of Microsoft's Consumer and Commerce Group and a key 
leader in the company's Internet strategy, spoke with PressPass about 
this new service. 

PressPass: Passport has been available-for a-few months on ^ 
MSN;eOM,_and it already has miljions of ^ u^^ 
announcement mean? 

Chase: Microsoft Passport's single sign-in service has been available 
since July on a number of MSN sites, such as MoneyCentral, Web 
Communities, Auctions, and Hotmail. Today, we're announcing the 
broader availability of the Passport wallet service, with more than 50 
Internet sites committed to supporting the Passport wallet — including 
leading merchants like barnesandnoble.com, Buy.com, and 
Costco.com. This new service allows online shoppers to purchase items 
with ease, eliminating the need to repeatedly type the same shipping 
and billing information when ordering products or services at different 
Web sites. 

PressPass: How do you see Passport growing as we head into the 
holiday shopping season? How will the formal launch help the service's 
expansion? 

Chase: We will continue to sign up new merchants. Each site's 
implementation schedule will vary, but we're strongly encouraging 
them to go live in time for the holidays. Passport members are able to 
find out which sites now use the sen/ice, and which are coming soon, 
by checking the directory of participating sites at the Passport Web 
site. We expect a good number of merchants to be live with the service 
for the holiday shopping season. 



From a business partner perspective, this launch provides Microsoft 
with the opportunity to tell the industry that Passport is officially "open 
for business." We're very excited to announce that a large number of 
leading Web merchants have already committed to supporting the 
wallet service, and that will certainly attract other online businesses. 



PressPass: How is Passport different from competing services? 
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Chase: Other services now available offer only subsets of Passport's 
capabilities. Passport-offers a more^complete suite of~services> 
including-an eleetronie-wallet^sepvice^as-well as a single sig^^^ 
provides a login name and a~set of TTi^ 

information that can be used across multiple Web sites.-Some-Gf^ 
Passport's other"b"enefits^inclu^ae^g 

their-Passport^identity acr^s-niany'M^ a^ 

Rroprietary_znetwork,-and~a=server"Side design^^ 

CO n s u me rscacces s~to-t h e i r- Pas s po rt~a n y t i m e^^^a n y w h ere;~u s i n g: a ny 

IntemetjJev^ 

In=additionpPassport=takesra=stronger stanceion-privacy and sec^ 
Passport-ensures that-its=members always^controkthe- 
stgred-in-their^Passport7 and=whiGh~Web sites-receive3it;3^M 
Passport-requires albparticipating sites'to adopt'privacy policies that 
conform-tozindustry-recognized-privacy-standards^ and-they are 
req ui red-to-post^a'linFto the if priv^^ 
site.3 

PressPass: What benefits does Passport offer online merchants that 
their own proprietary systems do not? 

Chase: Today, each Web site asks consumers to fill out practically the 
same time-consuming purchase form. This just isn't a good use of their 
time and many consumers simply give up, leaving a full shopping cart. 
Companies that participate in the Passport service are providing their 
customers with the convenience and simplicity they've grown 
accustomed to when purchasing offline. A comparison might be made 
to the evolution of the credit-card industry. Consumers used to carry 
heavy wallets stuffed with a different credit card for every store. 
Today, they can use one universal credit card at millions of stores. 

One of the reasons businesses have preferred their own wallet systems 
to date is that those systems match their sites' look and feel. We've 
addressedrthat-by .designing Passport to be~h^ 
Passport customers-purehas^ goods^and^s^^^ 
sites,-they"maintain a continuol^^ 

and::brand. Also, we've ensured that Passport is easy to implement. 
Merchants simply incorporate a link into their purchase pages and 
retrieve data posted from the Passport server. 

PressPass: Microsoft recently agreed with competitors such as Sun 
Microsystems and AOL on a new technical format for electronic wallets 
called "electronic-commerce modeling language," or ECML. What will 
this new standard mean to Passport users? 

Chase: The new ECML format is an effort by Microsoft and other e- 
commerce leaders to make online purchasing easier for all consumers 
and merchants. The market acceptance and widespread appeal of 
electronic wallets has been hampered by a lack of standards. ECML 
simply defines a set of uniform field names for common commerce 
data that wallets and merchants can use to improve their 
communications. Even though wallets using ECML carry the same field 
names for the data that they manage, the user experience will be 
different from one wallet to the next. And the sites that support each 
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wallet also will vary. The benefit to Passport members is that many 
more merchants can easily process the information they receive from 
consumers using Passport wallets. 



PressPass: Microsoft assures that information in the Passport wallet is 
secure and private. How does Passport help users control how their 
personal information is used on the Internet? 



Chase: Rassport^ensures that its memb^re ar\ft^ 

information stored in their PassportrMemBere decide which Web sites 

receive^fhat^info^rmatibli^^^ 

cPassport wallet. 



{ d 6^ In additiony^PasspoltTTO this in f ormat ion miicFeasier for 

flj^ (L^ AT consumeris^By^llowlrvg^them to s^ 

fry^ h^C^ makesrupdates-a-bTeezerForex^^ 
^ Q, y o u r^pa re ntsFlf -they^mWer'a IPyo u^^ a te th e i r a dd ress 

onceFrather-than-ehangirfg^it^t^'eve^^ you frequent.^ 



Passport also helps consumers control the use of their information by 
requiring all participating Web sites to adopt privacy policies that 
conform to industry-recognized privacy standards. The sites must also 
post a link to their policy from their front page, so that consumers 
have an easy time finding the policy if they want to review it. 



PressPass: How much information about my online activities and me 
personally is shared by Passport and participating Web sites? 



Chase: First, the^only information that can be-shared between 
Microsoft and ther^participating-Passport sites js the„ demographic and 
wallet-information that a^ member has provided. AA/hen a member signs 
i nto a Web site,-Microsoft sends the site that member's zip code , 
c ountry7rand citv-or reqion. -The member may also choose to provide 
hls or her nickname, e-mail address/ agey gendery-and language 
preference when signing in. 



Separately, when members decide to use their wallets to buy 
something online, only the specific billing and shipping information 
selected for that particular purchase will be sent to that site. The^site^ 
may-ask consumers for^additional information, such as their dress size;, 
or airline seating-preference— but^this Information is hot stored in the 
member's Passport and, therefore, is not shared with other sites that 
the member chooses to~sigh into^or pur^^ 



When a member chooses to sign into a site, his or her information is 
subject to that site's policies. A quick check of the merchant's privacy 
policy — using the link on the home page of the site — will provide 
what consumers need to know to understand how the merchant will 
use their Passport information, including their e-mail and mailing 
addresses. 



PressPass: How does Passport fit into Microsoft's new "Everyday 
Web" Internet strategy? 
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Chase: The "Everyday Web" is Microsoft's vision of making the Web an 
essential and valuable part of people's lives. Passport's role in this 
strategy is to make common activities, such as shopping online and 
getting access to information or communications services, significantly 
easier. These activities usually require the consumer to share 
information with a site. Passport's single sign-in and wallet services 
provide the key for making these exchanges easier, faster, and more 
secure. And, consumers can access their Passport wallet anytime, 
anywhere, using any device connected to the Internet. 

The "Everyday Web" vision for businesses Is to provide a 
comprehensive and integrated suite of services to help companies 
leverage the Internet to increase their sales and profits. For them, 
Passport's services provide an opportunity to improve their customers' 
experience by streamlining purchasing and simplifying sign-in and 
registration. Not only will this allow online merchants to increase their 
revenue, it will help them build stronger relationships with their 
customers. 

IMore Informataon Sourc^ss 

Press Releases: 

• Microsoft Passport Offers Streamlined Purchasing Across Leading 
Web Sites - oct. ii, 1999 

Feature Stories: 

• Q8lA: Making the Web an Indispensable Part of People's Lives - 

Sept. 23, 1999 

Other Microsoft Resources: 

• MSN on PressPass 

• Passport Web Site 

• MSN.COM 
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Microsoft Passport Offers 
Streamiineci Furchasing Across 
LeadiriQ Web Sites 



New E-Commerce Service to Be Supported by Top Web Stores, 
Including barnesandnoble.com, BUY.COM and Dell Computer 
Corp. 

REDMOND, Wash., and SEATTLE -^^g^aStSl^ - REDMOND, 
Wash. - Oct. 11, 1999 - MiGFOSoft-Gorpr-today announced the addition 
of electronic "Vwallet''Tfunctionality to'its"Passp6rt e-cbmmerce service. 
Available as a single sign-in service since July, Microsoft® Passport now 
allows online shoppers to purchase items with greater ease by 
eliminating the need to repeatedly type the same shipping and billing 
information when ordering products or services at different Web sites. 
Originally introduced on several areas of the MSN.COM^*^ network of 
Internet services, Passport is now available to third parties; more than 
50 leading Web merchants, including barnesandnoble.com, BUY.COM 
Inc. and Dell Computer Corp., have already committed to support the 
Passport wallet service. In addition, consumers who create Passport 
wallets by Nov. 15, 1999, will be eligible to win* a $25,000 online 
shopping spree. 



A^Rassport'accounf,^hich can be obtained for free**^at 
http#web, archive, org/web/20000303000822/http://vvww.p 
ma&s online shopping more convenient by allowing consumers to 
creati an electronic wallet that stores all their billing and shipping 
information as well as a single sign-in name for use at participating 
Passport sites. The wallet alleviates the hassle for consumers of having 
to keep track of different sign-in names and passwords for their 
shopping destinations. Once users sign in, they can avoid the 
redun;ciant and time-consuming data entry often required just to make 
ia simple purchase. They simply open their wallet and select a credit 
card^and shipping address, then Passport encrypts and securely 
transfers the information to the merchant for processing the 
trarfsactlon." 



"With the new Passport wallet service, consumers get the convenience 
and simplicity of an express purchase process at multiple sites," said 
Brad Chase, senior vice president of the Consumer and Commerce 
Group at Microsoft. "For businesses. Passport offers the opportunity to 
increase sales and build a larger, more loyal customer base." 



Online Merchants Support Passport Service 



The network of merchants participating in the Passport service has 
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already grown to include more than 50 Web sites, including market 
leaders such as barnesandnoble.com, BUY.COM, Chapters. ca, CDW 
Computer Centers Inc., C0STC0.COM, Dell Computer Corp., the 
Expedia.com^" travel service, iMall Inc., OfficeMax and skymall.com. 
(see addendum for a complete list). With Passport, Microsoft is helping 
participating merchants increase their site sell-through by streamlining 
their purchase process. According to Jupiter Communications***, 27 
percent of online consumers abandon the items they put into a 
"shopping basket" because they find filling out the forms too difficult. 
Passport helps online merchants address this problem by removing 
many of the barriers that customers face between browsing the "aisles" 
and leaving the "check-out counter." 



"At barnesandnoble.com, we are committed to simplifying the 
purchasing processes," said Carl Rosendorf, senior vice president, 
barnesandnoble.com. "Supporting a wallet program such as Passport is 
another way we can improve the site experience for our customers." 

In addition to streamlining the online shopping experience for 
customers. Passport provides merchants with the following benefits: 



• Increased customer acquisition and retention. Online stores 
that support Passport can earn the business and loyalty of 
Passport members, who value the ease and security of shopping 
at participating Passport sites. More than 40 million consumers 
use the Passport service today. 

• Easy implementation. Merchants can implement the Passport 
wallet service by simply incorporating a link into their purchase 
pages and retrieving data posted from the Passport server. 
Passport wallet is compliant with the industry-standard Electronic 
Commerce Modeling Language (ECML) data format developed by 
Microsoft and other e-commerce leaders to facilitate transactions 
between wallets and merchants. 

• Extensive customization. Passport is designed to be highly 
customizable, so when Passport customers purchase goods and 
services from participating sites, they maintain a continuous 
association with the merchant's branding and Web site. 

• Increased consumer trust. Consumers are concerned about 
how their personal information is used. With Passport, members 
control their own information stored in their Passport and which 
sites receive it. In addition. Passport requires all participating 
sites to adopt privacy policies that conform with industry- 
recognized privacy guidelines and post a link to their policy from 
the front page of the site. 



"At BUY.COM, our business is based on giving customers an efficient, 
fun way to shop, and filling out the checkout form isn't much fun," said 
Brent Rusick, vice president of Operations at BUY.COM. "Supporting 
Passport means that our customers can spend their time shopping ~ 
the reason they came to our site in the first place." 



"Passport provides several valuable benefits, not the least of which is 
helping more of our customers who select items for purchase make it 
through the checkout process," said Richard Owen, vice president of 
Dell Online Worldwide. "We look forward to incorporating Passport into 
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our operations and thereby providing our customers with an even 
better buying experience." 

Merchant Participation 

Online merchants interested in participating in the Passport service can 
obtain more information at 

http://web.archive.Org/web/20000303000822/http://wwvv'. passport. com/. 
Microsoft charges merchants a competitive annual service fee. 
Microsoft is waiving fees for new participants through March 31, 2000. 

About Microsoft Passport 

Microsoft Passport is an e-commerce service that makes using the Web 
and purchasing online easier, faster and more secure. Passport allows 
consumers to use a single sign-in name and electronic wallet at 
participating sites, reducing the amount of information they need to 
remember or retype. Using strong encryption and privacy policies, 
Passport also helps ensure the security of consumers' personal 
information and online transactions. 

Microsoft Passport is the first example of a "megaservice" available for 
businesses from Microsoft, Megaservices are a new breed of service 
that extend the Web's capabilities by directly linking applications, 
services and devices with one another over the Internet, Passport 
provides online merchants with customizable and easy-to-implement e- 
commerce services that improve their customers' experience by 
streamlining purchasing and simplifying registration across a network 
of Web sites and services. 

About Microsoft 

Founded in 1975, Microsoft (Nasdaq "MSFT") is the worldwide leader in 
software for personal computers. The company offers a wide range of 
products and services for business and personal use, each designed 
with the mission of making it easier and more enjoyable for people to 
take advantage of the full power of personal computing every day. 

*No purchase necessary. Open to U.S. residents 18 years or older and 
legal residents of Canada who have reached the age of majority in their 
province of residence. See 

http;//vveb.archive,org/web/20000303000822/http://www. passport, com/% 
20f 0 r% 2 Ooff ic ia I % 2 0 ru ies . 

**Connect-time charges may apply. 

***"Digital Wallets: Pursuing Dual Wallet Strategy Before Leverage Is 
Lost," Ken Cassar, Lucas Graves, Marc Johnson and Robert Sterling, 
Jupiter Communications. February 1999. 

Microsoft, MSN.COM and Expedia.com are either registered trademarks 
or trademarks of Microsoft Corp. in the United States and/or other 
countries. 
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Other product and company names herein may be trademarks of their 
respective owners. 

For more information, press only: 

Dave Hanon, Waggener Edstrom, (503) 443-7000, daveh@wagged.com 

Karia Wachter, Waggener Edstrom, (541) 966-8758, 
karlaw@wagged.com 

Rapid Response Team, Waggener Edstrom, (503) 443-7000, 
rrt@wagged.com 

For more information on Microsoft Passport: 

http://web.archive.Org/web/20000303000822/http://www, passport.com/pressreieases. a: 

Note to editors: If you are interested in viewing additional information 
on Microsoft, please visit the Microsoft Web page at' 

http://web.archive.Org/vveb/20000303000822/http://www, microsoft xom/press pass/ 
on Microsoft's corporate information pages. 

Addendum 

Merchants Participating in Microsoft Passport Service 

allejeweiry.com 

Art.com 

ArtSelect.com 

Ashford.com 

AuctionRover.com 

Americasbaby.com 

barnesandnoblexom 

Bath Warehouse, com 

Bluef1y,com 

Bottom Line Distribution 
BUY.COM 

CDW Computer Centers 
Chapters xa 
Cheap Tickets Inc. 
COSTCO.COM 
Crutchfield Electronics 
Dell Computer Corp. 
ePCdirect,com 
ephones 

Expedia.com Travel 

EZshop.com 

Flovi/erbud.com 

fiowersandgifts.com 

Food -com 

Furniture.com 

FurnitureFind.com 

Gear.com 

greatfood.com 

hardware.com 
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heaithshop.com 

Hickory Farms 

hotefdiscounts.com 

iGo,com 

IMALL, Inc. 

Kabang.com 

Key Bank 

Life Extension Foundation 

Lodging.com 

MedNA.com 

Miadora 

MSN.COM 

MyShoppingCiub.com 
OfficeMax 

Ohio Casualty Group 

OmahaSteaks.com, Inc. 

OnlineFood.com 

pers0nali2e.com 

redtagoutlet.com, Inc. 

skymalLcom 

Thrifty Car Rental 

TooHome.com 

toysmart.com 

ToyTimexom 

Travelscape.com 

Umbra.com 

WatchZone 
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